CVE-2007-1437: Ledgersmb

High severity, CVSS 9.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite files and possibly bypass authentication, and remote authenticated users to execute unauthorized code, by calling a custom error function that returns from execution.

Affected products

• Ledgersmb Ledgersmb: version 1.0.0 only; version 1.1.0 only; version 1.1.1 only
• SQL-Ledger SQL-Ledger: up to and including 2.6.24

Published 2007-03-13. Last modified 2026-06-16.